Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier: 79wLFXX7k0FFwYK8fYsvtCxdBo+Zcqx7bj88/SEbmeQ=
Subject key identifier: 33:FF:6B:05:22:93:FB:34:41:90:52:A5:E6:E5:A1:11:5B:29:B8:66
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial: 0193568A6BE510CD2A269B455E9E30669C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number: 023D
Signing time: Sat 23 Nov 2024 01:02:12 +0000
Manifest this update: Sat 23 Nov 2024 01:02:12 +0000
Manifest next update: Sun 24 Nov 2024 01:02:12 +0000
Files and hashes: 1: 0mtyofaROf_Fsx9u0yDgYPhonuo.roa (hash: cZ7Zn4BzotiG+HiJ0SZmf8LxiqB7/zGg5Nc6UZszvOQ=)
2: XnPraB41E1QQFEevgegIN3EfNGQ.roa (hash: 722ufutqFHVzyitCfMx7stFEGNMbvPgVkLvy4VjNZCE=)
3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: nbFt+VEKeJvW50QyubT0dD+M3L+64brxitTUhahsFy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:6b:e5:10:cd:2a:26:9b:45:5e:9e:30:66:9c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Validity
Not Before: Nov 23 01:02:12 2024 GMT
Not After : Nov 24 01:02:12 2024 GMT
Subject: CN=33ff6b052293fb34419052a5e6e5a1115b29b866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:99:4d:cf:83:15:5b:08:70:f5:b7:9a:e8:
fc:e4:a1:86:c4:ba:b3:a8:58:a5:ce:a1:c6:a7:92:
8b:c4:dd:24:7d:94:d7:8e:38:6b:3f:01:f5:a7:89:
00:b4:5d:27:0d:7d:08:2e:81:7e:d6:5d:fa:e3:9e:
02:54:13:47:b7:6c:48:97:a2:db:4b:ea:07:7e:3a:
99:85:c3:f8:e5:0f:18:22:de:b2:56:fa:e2:ae:a9:
01:e2:44:9f:77:e0:e6:ff:b9:66:a1:f0:14:8e:2e:
17:25:34:0f:4c:f8:0b:37:27:dc:89:18:f1:82:cb:
0a:af:5d:78:5b:45:75:5b:f4:5a:fd:2a:e2:3f:d9:
3e:bb:9c:ad:17:4d:1a:a6:be:a4:70:08:de:09:bc:
d0:d1:3b:12:e8:6b:c4:b5:ab:03:f3:b8:c1:e5:87:
42:ab:eb:ea:b4:7f:d7:69:5f:32:41:b3:b2:3a:d3:
bd:4e:91:f0:73:c9:dc:7a:ee:e1:de:47:73:b6:90:
0c:8d:8b:71:09:e4:d8:21:fb:08:db:bf:cd:f8:1d:
5b:a8:13:b0:46:ce:1b:74:08:b5:69:c7:9b:9f:2a:
d0:7a:cc:88:44:3d:0a:ec:c3:8a:56:53:04:59:48:
86:6a:63:db:db:84:71:bd:ea:9d:d9:75:b6:de:d8:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FF:6B:05:22:93:FB:34:41:90:52:A5:E6:E5:A1:11:5B:29:B8:66
X509v3 Authority Key Identifier:
keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5c:7f:47:d7:fa:d9:32:50:54:ab:d6:66:10:cd:55:db:8e:
4b:b9:ca:eb:7c:f2:16:62:e7:12:f4:9e:e3:f6:50:46:cb:d3:
e0:ca:77:be:53:f1:c3:b5:49:e2:6c:01:39:1f:f1:68:a3:77:
49:1a:12:ac:4b:f8:0a:67:26:7e:72:ed:88:2f:8b:da:39:68:
39:6a:cf:d9:07:6a:85:59:86:0d:22:99:ec:b4:cc:33:be:70:
9d:b6:a5:a0:9e:6d:e3:6a:6a:c7:81:ba:93:42:89:98:68:63:
7e:bc:d0:cd:47:2e:d3:25:61:97:7c:7e:de:71:bc:8c:ec:2c:
b4:78:e9:1d:e7:af:00:a7:e6:1e:ce:54:a6:57:a5:f5:49:7b:
a1:ec:c0:2b:22:f2:5a:37:c6:d8:a0:44:00:46:0c:bf:06:97:
ea:b7:e5:d9:0c:e0:c4:e8:50:08:af:55:6f:09:6a:63:68:3a:
c7:87:22:b3:92:b7:78:eb:79:ef:e8:16:4d:4b:af:86:da:8e:
a8:36:d5:6e:84:20:86:1e:13:39:01:b7:3c:5d:75:ac:e1:79:
6e:7d:c2:07:b0:a6:b1:99:f3:0e:a4:22:9d:29:22:9d:07:10:
ff:4b:31:6b:97:7a:ef:6f:f5:bf:56:f6:98:41:d0:10:e1:b3:
a7:81:c1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:40:47 2024 by rpki-client on console-fra.rpki-client.org